Authentik Worker Operator

Learn about configurations >

• consumer_listen_timeout | int

  Default: 30

  Wait time in seconds for worker listener polling. If using transaction-level connection pooling (where LISTEN/NOTIFY is unsupported), decrease this value (e.g., to 5) to reduce background task processing delay.

• cpu | string

  K8s cpu resource limit, e.g. "1" or "500m". Default is unset (no limit). This value is used for the "limits" portion of the resource requirements (the "requests" portion is automatically deduced from it). See https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/

• http_proxy | string

  URL of the HTTP proxy eg http://proxy.internal:6666, it will set the HTTP_PROXY var in the workload environment

• https_proxy | string

  URL of the HTTPS proxy eg http://proxy.internal:6666, it will set the HTTPS_PROXY var in the workload environment

• log_level | string

  Default: info

  Configures the log level.

  Acceptable values are: "info", "debug", "warning", "error" and "critical"

• memory | string

  K8s memory resource limit, e.g. "1Gi". Default is unset (no limit). This value is used for the "limits" portion of the resource requirements (the "requests" portion is automatically deduced from it). See https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/

• no_proxy | string

  Domains that need to be excluded from proxying no_proxy="test.com,test.co.uk", it is a comma separate list

• postgresql_conn_health_checks | boolean

  When true, Authentik will run a quick connectivity test on every database connection request to detect and discard stale or dead sockets proactively.

• postgresql_conn_max_age | int

  Maximum lifetime of a database connection in seconds. Set to 0 to force immediate recycling of connections, or a low positive integer to limit connection age.

• postgresql_disable_server_side_cursors | boolean

  Set to true when utilizing transaction pooling (e.g. PgBouncer or Pgpool) to prevent database cursors from breaking across connections.

• task_default_time_limit | int

  Default: 600

  Default duration (in seconds) a task can run before it is aborted. Some tasks (e.g. LDAP source sync) will override this with their own limit. Maps to AUTHENTIK_WORKER__TASK_DEFAULT_TIME_LIMIT.

• task_expiration_days | int

  Default: 30

  How many days completed tasks are kept in the database before they are deleted. Maps to AUTHENTIK_WORKER__TASK_EXPIRATION.

• task_max_retries | int

  Default: 5

  Number of times a failing task will be retried before it is abandoned. Maps to AUTHENTIK_WORKER__TASK_MAX_RETRIES.

• worker_processes | int

  Default: 1

  Number of worker processes to start. Each process runs independently and picks up tasks from the PostgreSQL queue. In environments where scaling with multiple replicas is not possible, this can be increased to handle higher loads. Maps to AUTHENTIK_WORKER__PROCESSES.

• worker_threads | int

  Default: 2

  Number of Dramatiq threads per worker process. A value below 2 is not recommended unless you have multiple worker replicas. Maps to AUTHENTIK_WORKER__THREADS.